• Mac Os Privileged Helper Tools Does Not Exist In Library Databases
• Mac Os Privileged Helper Tools Does Not Exist In Library Work
• Mac Os Privileged Helper Tools Does Not Exist In Library System
• Mac Os Privileged Helper Tools Does Not Exist In Library Terms

Sep 19, 2018 Make an Alias in Bash or Zsh Shell in macOS, OS X Terminal September 19, 2018 23 Comments To make aliases of macOS Unix commands in your bash or zsh shell on macOS and earlier versions, it is done via your.bashprofile or.zsh file which lives in your home account directory, if the file does not already exist, just create one. Expected behavior Install networking components after first installation and priviledge access granted. Actual behavior Gives a 'fatal error' message. Information Full output of the diagnostics from 'Diagnose & Feedback' in the menu Dock.

OS: Mac OS X 10.8.4 12E55 Xcode: 4.6.2 (4H1003) macos plist launchd. Line as I will not have this privilege on user's machine.I cannot also call from within my caller program since I do not have elevated. There is a caller program that basically installs this helper tool in the elevated location /Library/PrivilegedHelperTools.

This document assists in troubleshooting failed signature verification that can occur when archiving an app in Xcode, or while validating an archive for distribution.

Overview

Signature verification problems can be puzzling, but usually these types of problems can be traced to a few common cases that are relatively easy to resolve. The goal of this document is to help developers having trouble with their signature verification by enabling them to quickly and easily identify what types of problems they are having and how to correct them.

Diagnosing Signature Verification Failure

• Hence, make sure that you are accessing the Library Folder for a good reason and you do know as to what you are trying to achieve. Access Hidden Library Menu Option On Mac. Follow the steps below to access the Hidden Library Menu option on your Mac. Left-click your mouse anywhere on the screen of your Mac.
• Note: Since Mac OS 10.7 (Lion), the User Library folder is hidden. To access it, click on Go in the menu bar and press down the Alt key. You'll now find the Library entry in the menu. Since OS X 10.9 (Mavericks) it is necessary to restart your computer after deleting the above-mentioned files to.
• In cases 2 and 3, we use queryByTestId instead of getByTestId.queryByTestId doesn't fail when the queried element doesn't exist, instead, it returns either a value or null and that's what we test with expect.toBeTruthy and expect.toBeNull.

Signature verification failure is diagnosed with the following error messages.

Listing 1 App Validation error indicating the app is not signed with an App Store distribution profile.

Listing 2 Alternate app validation error indicating the app is not signed with a provisioning profile suitable for submission.

Listing 3 Invalid Binary rejection email indicating a corrupted code signature was detected.

Resolving Signature Verification Failure

To resolve signature verification failure, make sure the app and its Xcode project satisfy the recommendations made by the following sub-sections.

Check the Signature For a Failure Root Cause

The following Terminal command is capable of distinguishing a number of code signature issues that follow.

Important: '/path/to/the.app' is your app file path. Drag and drop the .app file from the Finder window into the Terminal window to automatically fill in the file path.

Note: To find the app file associated to an Xcode app archive, see How do I locate the .app file signed for distribution from within an application archive?

Listing 4 Healthy command results appear as shown.

If a different result is shown, compare it with the following list of code signature issues.

• This error indicates that the profile used to sign the app is missing its submission entitlement which can occur for example when a development Provisioning Profile is used to the sign the app instead of the intended distribution profile.

• Or, it's related error:

  Following are two options to resolve this issue:

  • The file prefixed with '._' is problematic and a was the result of copying certain Mac OS X files to a non-HFS+ formatted disk. These files are referred to as Dot files, Apple Double files, or resource forks. They are invisible to Finder but can be removed using the dot_clean utility. The Xcode Project Folder is the argument to dot_clean as illustrated below.

    Note: Drag and drop the Xcode project folder from Finder to Terminal to automatically in the path.

    Important: If Terminal cannot find the dot_clean utility, download the optional Command Line Tools through Xcode via Preferences > Downloads.

  • Alternatively, this issue may be worked around by making a new project using the latest version of Xcode. Move your code, resources, and frameworks to the new project, and reattempt your distribution build validation.

• Two slightly different versions of this error follow:

  • If (x) in the above error is a file path that appears to be *truncated* then the workaround to this problem is to do anything in your power to *shorten* that path, such as setting the 'bundle name' Info.plist property to a shorter name. Then reattempt your distribution build validation.

  • If (x) in the above error is a file path that *does not* appear to be truncated but you are running on Mac OS X 10.6.x, please update to OS X Lion 10.7.x and download/install the latest version of Xcode.

• To resolve this error:

  • 1) Ensure that your 'Executable file' Info.plist property is set to the value: ${EXECUTABLE_NAME}.

  • 2) Ensure your Derived Data folder resides on an HFS+ formatted drive.

  • 3) This issue was prevalent in older versions of Xcode. Make sure you're running the latest version of Xcode possible on your Mac, and if so, reinstall Xcode.

  • 4) This error has also been known to occur when the codesign utility cannot find the codesign_allocate utility, which could occur if the CODESIGN_ALLOCATE environment variable is not set, such as:

• This error occurs when signed app bundles are placed on foreign disk formats that do not support Mac OS X resource forks. To resolve the issue please ensure that both the Xcode Project and the Derived Data folder reside on an HFS+ formatted disk. The Derived Data setting is found within Xcode Preferences > Locations.

• • If OCSP and CRL checking are temporarily turned off (in Keychain Access > Preferences > Certificates) and this resolves the Xcode build, reinstall Xcode (to restore its own signature) and also ensure there are no network connectivity issues on the Mac that is running Xcode.

Do Not Distribute Apps From Beta OS X or Beta Xcode

App Store apps are required to be built with GM versions of OS X and Xcode. If apps are instead built with a beta version of OS X or Xcode, they will be rejected on those grounds. Beta, Seed, Developer Preview and Pre-Release software are synonymous in this context.

• Check the OS X version using the Apple menu > About This Mac > More Info > System Report. Click 'Software' on the sidebar for the System Version. Compare your system version and build number with the latest OS X release displayed on the Mac App Store.

• To check Xcode's version, open the Xcode menu > About Xcode. Compare the version and build number with the latest non-beta Xcode release available on the Dev Center website.

Avoid special characters in Executable names

Executable files within your app that contain special characters (i.e. non-numeric, and non-alpha) can cause this rejection. To resolve the problem, change the Xcode target’s Product Name build setting from ${TARGET_NAME} to a string containing only alpha/numeric characters. Also, ensure the value of the Info.plist key 'Executable file' is equal to ${EXECUTABLE_NAME}. If identified to be the cause, please file a bug report using Apple Bug Reporter identifying the problematic characters.

Code Signing Entitlements Troubleshooting

Code signing entitlements exist in two places within an app and they must match (or be compatible with) each other to prevent code signing entitlement related validation failures.

Entitlement Destinations on a built App

To diagnose code signing entitlement validation failures, compare the entitlements of the following two places for mismatches or unexpected values:

• The app's signature. You can view the entitlements on the app's signature using the steps in section: How do I check the entitlements on my Application's Signature?

• The app's embedded provisioning profile. You can view the entitlements associated to the app's embedded provisioning profile using the steps in section: How do I check the entitlements associated to my Provisioning Profile?

Entitlement Sources

To resolve entitlement mismatches or unexpected values, you'll need to track down their source. The following list identifies where the app's entitlements of the above locations are configured:

1. Entitlements on provisioning profiles are configured through their App ID on the Certs IDs and Profiles website, or equivalently, through Xcode's Target > Capabilities pane.

Mac Os Privileged Helper Tools Does Not Exist In Library Databases

2. Entitlements on the app's signature source from the following various places:

• The entitlements associated to the provisioning profile used to sign the app. (These source from the services enabled for the App ID that is associated to the profile.)

• Capabilities which are enabled on the Xcode > Target > Capabilities pane. (This essentially affects the entitlements that are associated to App ID linked to the provisioning profile that Xcode will attempt to use to sign the app.)

• Any custom code signing entitlements that might be supplied via a '.entitlements' file defined in Xcode's Code Signing Entitlements target build setting (if any).

• The App ID Prefix always sources from the App ID Prefix associated to the provisioning profile that was *initially* used to sign the app.

  Important: 'Initially' is emphasized because apps can be re-signed on the Xcode > Organizer > Archives pane for various distribution workflows in which all entitlements are replaced by the re-signing profile *except* the App ID Prefix. See section Avoid App ID Prefix Mismatching for more information.

Note: Supplying a custom Code Signing Entitlements file within your Target > Build Settings is generally only required when utilizing custom keychain access sharing across multiple apps.

Workflow to Verify an App's Entitlements

The process to check the entitlements of the *exact* build you'll be submitting to the App Store, use the workflow in Technical Q&A QA1798 - Checking Distribution Entitlements.

Avoid App ID Prefix Mismatching

There are two code signing phases involved in distributing an app and the App ID Prefix of both Provisioning Profiles used in those code signing phases must match. If the App ID Prefix doesn't match in both, the app will fail to submit to the app store, and it will fail to install on testing or enterprise iOS devices.

An example App ID Prefix is shown below. It's the 10-character prefix of the App ID associated with the Provisioning Profile. So for App ID:

The App ID Prefix is:

Here's how to resolve the issue:

1. Check the App ID Prefix of your app's embedded profile using the steps in How do I check the entitlements associated to my Provisioning Profile?

2. Then compare it to the App ID Prefix on the apps signature using How do I check the entitlements on my Application's Signature?

3. If the prefix doesn't match, the easiest solution is to use the same provisioning profile in both signing phases:

   1. Open the Xcode project Target > Build Settings, and expand the Code Signing Identity and Provisioning Profile build settings. Set “Any iOS SDK” to “iOS Distribution” for Release.

   2. Set the Provisioning Profile build setting to your distribution provisioning profile.

   3. Re-archive the app (via Xcode > Product menu > Archive).

   4. Re-submit the app through the Xcode Organizer, and be sure to pick the same distribution profile to sign the submission.

Note: The App ID Prefix is sometimes equal to the Team ID, but it isn't always the case. See Cocoa Core Competancies > App ID for more information about App IDs.

Sign Your App With The Correct Provisioning Profile

There are two locations within Xcode that determine which Provisioning Profile is used to sign the app: the Code Signing Identity and Provisioning Profile target build settings, and the Provisioning Profile selection menu shown while distributing an archive on the Organizer.

Here are the two locations to ensure you're signing with the right provisioning profile:

• The app archiving invoked via Xcode > Product menu > Archive uses the Code Signing Identity and Provisioning Profile target build setting to select the Provisioning Profile to sign the app.

  • Assign the Release build configuration to the Archive task. Do that using the steps in Scheme Editing Help. This affects which Code Signing Identity build setting is used to sign the app during app archiving.

  • Set the Release build configuration's Code Signing Identity to iOS Distribution, and set the Release build configuration's Provisioning Profile build setting to your App Store distribution provisioning profile.

• The Distribute phase on the Xcode > Organizer > Archives tab uses the Provisioning Profile selection menu to re-sign the archive before it is submitted. Note that App ID Prefixes are never updated during the re-signing process. See section Avoid App ID Prefix Mismatching for more information.

Note: You can verify your results by checking that your app is signed with the distribution certificate using the steps in section How do I see which certificate was used to sign my app?. The 'Authority' field should print 'iPhone Distribution'.

Install the Apple Root certification authority

The app validation process requires the root certification authority (CA) certificates in order to validate the app's code signature.

If these files are missing from your keychain, follow these steps:

1. Download and install both Apple root certificate authorities here: Apple Root Certification Authority.

2. Double click the downloaded .cer files to install them into Keychain Access. Add them to the default 'login' keychain.

3. If the submission still fails signature verification, continue to the next requirements covered by this guide.

Supporting Information

How do I check if my application's signature has been corrupted?

Use the steps in section Check the Signature For a Failure Root Cause to check whether your apps signature is (or has been) corrupted.

How do I see which certificate was used to sign my app?

Note: This command uses an .app file argument. If needed, see the steps in section How do I locate the .app file signed for distribution from within an application archive?

To verify your app was signed with the correct certificate, use the following console command:

Note: Drag and drop the .mobileprovision file from Finder to Terminal to automatically fill in the file path.

Check the 'Authority' field within the command results to see which identity owns the certificate used to sign the app:

If the Authority of a distribution build reads 'iPhone Developer' then a development Provisioning Profile was used to sign the app by mistake. For more information, see the section Sign Your App With The Correct Provisioning Profile.

How do I check the entitlements on my Application's Signature?

During the code signing process, application entitlements are written into the signature. The entitlements source from two places, the Provisioning Profile used to sign the app, and a custom code signing entitlements file, if you've included one in the Xcode target's optional Code Signing Entitlements build setting. To view the entitlements on the app's signature, run the following console command:

Note: Drag and drop the .mobileprovision file from Finder to Terminal to automatically fill in the file path.

Note: This command uses an .app file argument. If needed, see the steps in section How do I locate the .app file signed for distribution from within an application archive?

For example, the following are results from a typical distribution build:

The entitlements in this case came solely from the Provisioning Profile used to sign the app. Additional entitlements should be present if any of the store technologies are enabled for your app. See Provisioning Your App for Store Technologies for more information on ways that additional entitlements get added to the app's signature.

How do I locate the .app file signed for distribution from within an application archive?

• Follow the steps in the App Distribution Guide section Beta Testing Your iOS App to create an .ipa, however, be sure to sign the app using your App Store distribution Provisioning Profile.

• Rename the .ipa created in the previous step to have a .zip file extension, and double click it to decompress the contents. The uncompressed folder will be titled 'Payload'.

• See the .app file signed for distribution within the ./Payload/Applications folder.

How do I check the entitlements associated to my Provisioning Profile?

Entitlements are associated with Provisioning Profiles and transferred to your application's signature during code signing.

Checking the Entitlements of a Provisioning Profile

Note: Drag and drop the .mobileprovision file from Finder to Terminal to automatically fill in the file path.

Listing 5 The pertinent command results are seen within the Entitlements key.

Consider the example that this profile was used to create the application signature as seen in the section How do I check the entitlements on my Application's Signature? Note the following expected results when comparing the two:

• 1) the application-identifier entitlement on the signature is fully-qualified to fill in the '*' portion of that entitlement within the profile.

• 2) the keychain-access-groups entitlement on the signature is fully-qualified and in most cases will be equal to the fully-qualified application-identifier on the signature.

• 3) get-task-allow is false, as it should be for distribution profiles. Though this particular entitlement is ignored during App Store ingestion, it must be false for Ad Hoc profiles (and Ad Hoc signatures). If you have a value of true here on the signature it might indicate that you've built your distribution build with the wrong build configuration, 'Debug' instead of 'Release'.

Checking the entitlements of an Apps embedded Provisioning Profile

To check the entitlements of a profile that is embedded into your .app bundle as a result of Code Signing process at build time, the command will look similar to:

Mac Os Privileged Helper Tools Does Not Exist In Library Work

Note: Drag and drop the .mobileprovision file from Finder to Terminal to automatically fill in the file path.

How do I check which devices are associated to my Provisioning Profile?

Devices are associated to Development and Ad Hoc Provisioning Profiles when they're created on the iOS Portal. To verify those devices specified are contained within the resulting profile, use the following command:

Note: Drag and drop the .mobileprovision file from Finder to Terminal to automatically fill in the file path.

Within the command results look for the <key>ProvisionedDevices</key> section for the device UDIDs associated to the profile, such as:

Document Revision History

Copyright © 2014 Apple Inc. All Rights Reserved. Terms of Use Privacy Policy Updated: 2014-09-10

While many Mac users may never need to access their User Library folder while running macOS Sierra — some advanced users, may need to get in there and access support data and such when troubleshooting. The folder is hidden by default in macOS Sierra, but it only take a few moments to access it, or make it so that the folder is always visible.

Before we begin, we want to say that it’s usually a good idea to leave things in the users ~/Library folder alone, unless directed to by support personnel. The folder contains caches, application support data, and preference files, and if you screw around in there too much, you could really screw things up. We DO NOT recommend it. Now that our butts are covered, here’s how to find and display your User Library folder.

Opening the User Library Folder in macOS Sierra

If you just need to access the user ~/Library folder on occasion, you can get into it by using the Finder “Go” menu.

Mac Os Privileged Helper Tools Does Not Exist In Library System

1. From the Finder in macOS, (Click anywhere on the Desktop where there isn’t already an app window, and you should see “Finder” appear in the upper left hand corner of your display, up near the Apple icon), click the “Go” menu item, and then hold down the SHIFT key on your Mac’s keyboard.
2. Click on “Library” in the drop-down list. (If you release the SHIFT key, the “Library” option will disappear from the menu. Now you see it, now you don’t.)

If you’re not much of a mouser, you can just hit the key combo of Command + Shift + L, and a Finder window will appear showing the ~/Library directory of the active user account.

Mac Os Privileged Helper Tools Does Not Exist In Library Terms

Always Show the User Library Folder in macOS Sierra

If you are an advanced user, you might want to always display the user ~/Library folder in your user Home directory. It just takes a few clicks to enable this option.

1. In Finder, go to the Users’ home folder
2. Click the “View” menu and then click “View Options”
3. Click the “Show Library Folder” option in the Settings options for the User home folder, as shown below.

Following the above steps will change the settings for only the current user. Any other users will also have to follow the above steps while logged into the machine.

These steps also work with Mac OS X El Capitan and Yosemite. In earlier versions of OS X, a command line entry was required to perform the same magic.

(Thanks to OS X Daily)